Critical Rust (crates.io) package vulnerabilities
The Beam CVE database tracks 66 critical package advisories for Rust (crates.io): 66 critical severity. The newest is CVE-2026-115889, published Oct 23, 2026 and fixed in 36.0.19, 43.0.0.
Critical-severity advisories for Rust (crates.io) packages from the GitHub Advisory Database, published since 2024. AI coding agents install packages on their own, so a vulnerable or malicious dependency can reach a project without a human picking it. Advisories for AI tools themselves are listed under each tool.
- Vulnerabilities tracked
- 66
- Critical
- 66
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 1
All entries, newest first
CVE-2026-115889 · Rust (crates.io)
Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
critical9.9Oct 23, 2026CVE-2026-75856 · Rust (crates.io)
CodeWhale: SSRF bypass - TOCTOU on DNS failure for DNS pinning
critical8.6No fixSep 4, 2026CVE-2026-46428 · Rust (crates.io)
lettre has TLS hostname verification disabled when using Boring TLS backend
critical9.1Jul 28, 2026GHSA-99j7-fhr2-xfj4 · Rust (crates.io)
`exploration` was removed from crates.io for malicious code
criticalNo fixJul 10, 2026CVE-2026-54496 · Rust (crates.io)
Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness
critical9.3Jul 6, 2026CVE-2026-52735 · Rust (crates.io)
zebrad has consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser
critical9.3Jul 2, 2026CVE-2026-33646 · Rust (crates.io)
Mise Vulnerable to Arbitrary Code Execution via Tera Templates in .tool-versions Files (Trust Bypass)
critical9.6Jun 22, 2026CVE-2026-46695 · PyPI
BoxLite: Permission Bypass Allows Modification of Read-Only Files
critical10.0May 21, 2026CVE-2026-46703 · PyPI
Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host
critical9.6May 21, 2026CVE-2026-45311 · Rust (crates.io)
DeepSeek TUI: run_tests Tool Enables RCE via Malicious Repository Without Approval
critical9.6May 14, 2026CVE-2026-45374 · Rust (crates.io)
DeepSeek TUI: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files
critical9.6May 14, 2026GHSA-pvmv-cwg8-v6c8 · Rust (crates.io)
Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output
critical9.3May 8, 2026CVE-2026-44497 · Rust (crates.io)
Zebra has Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer
critical9.1May 7, 2026CVE-2026-44498 · Rust (crates.io)
Zebra's Block Validator Undercounts Coinbase and P2SH Sigops
critical7.5May 7, 2026GHSA-cwfq-rfcr-8hmp · Rust (crates.io)
Zebra's Transparent SIGHASH_SINGLE Handling Diverges from zcashd for Corresponding Outputs
critical9.2May 7, 2026GHSA-g38r-8gmr-ghrf · Rust (crates.io)
`mysten-metrics` was removed from crates.io for malicious code
criticalNo fixMay 4, 2026GHSA-qprh-m6p3-hwxc · Rust (crates.io)
`sui-execution-cut` was removed from crates.io for malicious code
criticalNo fixMay 4, 2026CVE-2026-33471 · Rust (crates.io)
nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
critical9.6No fixApr 22, 2026CVE-2026-41197 · Rust (crates.io)
Brillig: Heap corruption in foreign call results with nested tuple arrays
critical9.3Apr 21, 2026CVE-2026-41583 · Rust (crates.io)
Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling
critical9.1Apr 18, 2026CVE-2026-41584 · Rust (crates.io)
Zebra has rk Identity Point Panic in Transaction Verification
critical7.5Apr 18, 2026CVE-2026-34987 · Rust (crates.io)
Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access
critical9.2Apr 10, 2026CVE-2026-40093 · Rust (crates.io)
nimiq-blockchain is missing a wall-clock upper bound on block timestamps
critical9.1No fixApr 10, 2026CVE-2026-34971 · Rust (crates.io)
Wasmtime: Miscompiled guest heap access enables sandbox escape on aarch64 Cranelift
critical7.8Apr 9, 2026GHSA-fxc9-7j2w-vx54 · Rust (crates.io)
mpp has multiple payment bypass and griefing vulnerabilities
critical9.3Mar 29, 2026CVE-2026-34202 · Rust (crates.io)
Zebra node crash — V5 transaction hash panic (P2P reachable)
critical9.2Mar 27, 2026CVE-2026-30960 · Rust (crates.io)
RSSN has Arbitrary Code Execution via Unvalidated JIT Instruction Generation in C-FFI Interface
critical9.4Mar 10, 2026CVE-2026-2833 · Rust (crates.io)
Pingora vulnerable to HTTP Request Smuggling via Premature Upgrade
critical9.3Mar 5, 2026CVE-2026-2835 · Rust (crates.io)
Pingora has HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
critical9.3Mar 5, 2026GHSA-5wp8-q9mx-8jx8 · Rust (crates.io)
zeptoclaw has Shell allowlist-blocklist bypass via command/argument injection and file name wildcards
critical10.0Mar 5, 2026GHSA-mh23-rw7f-v5pq · Rust (crates.io)
`time-sync` was removed from crates.io due to malicious code
criticalNo fixMar 5, 2026GHSA-xhw7-jhmp-j62j · Rust (crates.io)
`dnp3times` was removed from crates.io due to malicious code
criticalNo fixMar 5, 2026GHSA-77xj-rrh3-wx3v · Rust (crates.io)
`time_calibrator` was removed from crates.io due to malicious code
criticalNo fixMar 4, 2026GHSA-wf45-3gpw-vrqv · Rust (crates.io)
`time_calibrators` was removed from crates.io due to malicious code
criticalNo fixMar 4, 2026GHSA-5pmp-jpcf-pwx6 · Rust (crates.io)
`tracing-check` was removed from crates.io for malicious code
criticalNo fixMar 2, 2026CVE-2026-27822 · Rust (crates.io)
Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover
critical9.0Feb 25, 2026GHSA-p5vf-5754-x7p3 · Rust (crates.io)
`polymarket-client-sdks` was removed from crates.io for malicious code
criticalNo fixFeb 13, 2026GHSA-6v2j-vr4h-f632 · Rust (crates.io)
`finch_cli_rust` was removed from crates.io for malicious code
criticalNo fixFeb 12, 2026GHSA-vgr2-r5hm-f6gf · Rust (crates.io)
`sha-rst` was removed from crates.io for malicious code
criticalNo fixFeb 12, 2026GHSA-xp79-9mxw-878j · Rust (crates.io)
`finch-rst` was removed from crates.io for malicious code
criticalNo fixFeb 12, 2026GHSA-382q-fpqh-29f7 · Rust (crates.io)
`polymarket-clients-sdk` was removed from crates.io for malicious code
criticalNo fixFeb 6, 2026GHSA-3mmg-7c2q-8938 · Rust (crates.io)
`sha-rust` was removed from crates.io for malicious code
criticalNo fixFeb 6, 2026GHSA-6662-54xr-8423 · Rust (crates.io)
`evm-units` was removed from crates.io for malicious code
criticalNo fixFeb 6, 2026GHSA-f8h5-x737-x4xr · Rust (crates.io)
`finch-rust` was removed from crates.io for malicious code
criticalNo fixFeb 6, 2026GHSA-x468-phr8-h3p3 · Rust (crates.io)
`uniswap-utils` was removed from crates.io for malicious code
criticalNo fixFeb 6, 2026GHSA-5w5r-mf82-595p · Rust (crates.io)
Cap'n Proto has Undefined Behavior in constant::Reader and StructSchema
critical9.3Jan 28, 2026CVE-2026-22696 · Rust (crates.io)
dcap-qvl has Missing Verification for QE Identity
critical9.3No fixJan 26, 2026CVE-2026-22863 · Rust (crates.io)
Deno node:crypto doesn't finalize cipher
critical9.2Jan 16, 2026CVE-2025-68926 · Rust (crates.io)
RustFS has a gRPC Hardcoded Token Authentication Bypass
critical9.8Dec 30, 2025CVE-2025-66016 · Rust (crates.io)
cggmp21 has a missing check in the ZK proof used in CGGMP21
critical9.3Nov 25, 2025GHSA-2fjw-whxm-9v4q · Rust (crates.io)
libnftnl has Heap-based Buffer Overflow in nftnl::Batch::with_page_size (nftnl-rs)
critical9.3Nov 25, 2025CVE-2025-61588 · Rust (crates.io)
risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`
critical9.3Oct 1, 2025CVE-2025-71392 · Rust (crates.io)
SurrealDB server-takeover via SurrealQL injection on backup import
critical9.4Apr 11, 2025CVE-2025-31477 · Rust (crates.io)
Improper Scope Validation in the `open` Endpoint of `tauri-plugin-shell`
critical9.3Apr 2, 2025GHSA-2gw2-qgjg-xh6p · Rust (crates.io)
Namada-apps allows Post-Genesis Validator Bypass
criticalFeb 20, 2025GHSA-82vg-5v4f-f9wq · Rust (crates.io)
Namada-apps can Crash with Excessive Computation in Mempool Validation
critical9.2Feb 20, 2025GHSA-f8qm-hmm3-fv7f · Rust (crates.io)
Namada-apps allows Excessive Computation in Mempool Validation
critical9.2Feb 20, 2025CVE-2025-24800 · Rust (crates.io)
ismp-grandpa crate accepted incorrect signatures
critical9.3Jan 28, 2025CVE-2024-51990 · Rust (crates.io)
jj vulnerable to path traversal via crafted Git repositories
critical7.5Nov 7, 2024CVE-2024-39697 · Rust (crates.io)
panic on parsing crafted phonenumber inputs
critical8.6Jul 9, 2024CVE-2024-36400 · Rust (crates.io)
Unable to generate the correct character set
critical9.4Jun 4, 2024CVE-2024-3584 · Rust (crates.io)
qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint
critical9.8Jun 2, 2024CVE-2024-32980 · Rust (crates.io)
Spin applications with specific configuration vulnerable to potential network sandbox escape
critical9.1May 8, 2024CVE-2024-32971 · Rust (crates.io)
Apollo Router vulnerable to Critical Regression In Query Plan Cache
critical9.0May 2, 2024GHSA-q73f-w3h7-7wcc · Rust (crates.io)
Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
criticalFeb 3, 2024GHSA-84x2-2qv6-qg56 · Rust (crates.io)
Nervos CKB P2P DoS Attacks
criticalFeb 2, 2024
Withdrawn advisories (4)
GHSA-h5q3-3v5q-v5j8
Duplicate Advisory: SurrealDB server-takeover via SurrealQL injection on backup import
critical8.0WithdrawnJul 18, 2026GHSA-262p-vjx5-45xh
Duplicate Advisory: HTTP Request Smuggling via HTTP/1.0 and Transfer-Encoding Misparsing
critical9.3WithdrawnMar 5, 2026GHSA-f9v3-j2m7-4hpg
Duplicate Advisory: HTTP Request Smuggling via Premature Upgrade
critical9.3WithdrawnMar 5, 2026GHSA-2hfw-w739-p7x5
Duplicate Advisory: nano-id reduced entropy due to inadequate character set usage
critical9.4WithdrawnJun 4, 2024